[Hiring] Security Engineer III, Data Governance @InComm Payments

When you think of InComm Payments, think of Innovative Payments Technology. We were founded over 30 years ago and continue to be a pioneer in the payment (FinTech) industry. Since our inception, we have grown to be a team of over 3,000 employees in 35 countries around the world. We own over 400 global technical patents and a network that includes over 525,000 points of retail distribution that points to our industry expertise.

InComm Payments works with the most recognized and valued brands in the world, and we are partnered with most of the world’s leading merchants. InComm Payments is highly focused on our people and their growth, and we work hard to make a career at InComm Payments meaningful and rewarding. We value innovation, quality, passion, integrity, and responsibility in all that we do, and we are looking for great people to join our team as we move forward towards a very bright future.

You can learn more about InComm Payments by visiting our Website or connecting with us on LinkedIn, YouTube, Twitter, Facebook, or Instagram.

The Data Governance and Data Loss Prevention team is executing the strategic roadmap intended to protect all Sensitive data from unauthorized exfiltration. This strategy considers various types of Sensitive data (PCI, PII, PHI, Security secrets, company intellectual property). Likewise, the execution considers the protection of these types of data through each of the attack vectors or platforms of exposure such as email, endpoint browsers, AI applications, cloud resources, etc.

This position will concentrate on the gap analysis evaluation between the current Data Governance and Data Protection state, and the desired state, and the internal directives framework needed to support and enforce the desired plan over time. This requires understanding of (A) contributing factors (cybersecurity, applicable governance and compliance frameworks, Risk Management, Privacy), as well as (B) the people, process and technologies necessary to implement directives and security controls, and (C) implementation strategies to bring controls into completion.

• Gather, normalize, analyze, and communicate data to define baseline of security controls that need a governance framework.
• Work with stakeholders to validate requirements, liabilities, thresholds, risks, and enforcement of directives (policies, standards, procedures).
• Update directives through approved process (draft, versioning, final publication).
• Socialize directives using marketing, branding, and communications best practices to educate users on practical and consistent adherence to directives.
• Collaborate with platform owners to develop automation for continuous monitoring and enforcing directives.
• Other related activities to Data Governance and Data Protection such as cross-collaboration and cross-training, mentorship, automation, continuous monitoring, etc.

• Demonstrable hands-on experience assessing, implementing controls, auditing, or remediating issues related to two of these below:
  • PCI DSS Compliance
  • Privacy regulations (i.e.: CCPA, LGPD, GDPR, DORA, HIPAA)
  • Financial regulations (i.e.: NYDFS, SOX, IFRS, FINREP, SEC.
  • Writing or updating directives (policies, standards, procedures)

• Demonstrable hands-on experience installing, setting up, and/or maintaining at least one of the tools/technology groups below:
  • Email DLP: Proofpoint, McAfee DLP, Symantec DLP, Forcepoint, Code42, Checkpoint.
  • Data Classification: Varonis, Microsoft Information Protection MIP, BigID
  • Browsers: Zscaler DLP, Enterprise browsers (i.e.: Island).
  • Cybersecurity and Data Analytics: Tableau, PowerBI, Python, Pandas, JSON/APIs, SIEM, SOAR, Grafana.

• Training, knowledge and/or experience (even if basic) with at least two of the practices/areas below:
  • Server/system administration
  • Database/system administration
  • Coding/scripting
  • API integration
  • Project/Program Management, implementations, or incident response
  • Communications, public speaking, advanced writing, and soft skills development.
  • Leadership development and mentorship

InComm Payments provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin, citizenship, veteran’s status, age, disability status, genetics or any other category protected by federal, state, or local law.

*This position is eligible for the Employee Referral Bonus Program - Tier III #LI-SO1 #LI-Remote